CVE-2018-6558

published 2018-08-23

CVE-2018-6558: The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which…

Priority P4 34 medium 6.5 CVSS 3.0

AV N AC L PR L UI N S U C N I H A N

The pam_fscrypt module in fscrypt before 0.2.4 may incorrectly restore primary and supplementary group IDs to the values associated with the root user, which allows attackers to gain privileges via a successful login through certain applications that use Linux-PAM (aka pam).

Affected

8 ranges

Vendor	Product	Version range	Fixed in
debian	fscrypt	< fscrypt 0.2.4-1 (bookworm)	fscrypt 0.2.4-1 (bookworm)
github.com	google_fscrypt	>= 0 < 0.2.4	0.2.4
google	fscrypt	< 0.2.4	0.2.4
google	fscrypt	>= 0 < 0.2.4-1	0.2.4-1
google	fscrypt	>= 0 < 0.2.4-1	0.2.4-1
google	fscrypt	>= 0 < 0.2.4-1	0.2.4-1
google	fscrypt	>= 0 < 0.2.4-1	0.2.4-1
the_fscrypt_project	fscrypt	—	—

CVSS provenance

nvd v3.0 6.5 MEDIUM CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

nvd v2.0 4.9 MEDIUM AV:N/AC:M/Au:S/C:N/I:P/A:P

osv 6.5 MEDIUM

vendor_debian 6.5 MEDIUM

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.